India has issued an urgent cybersecurity warning over a growing threat from the hacking group known as CRAFTY FALCON, which is reportedly using artificial intelligence tools to accelerate attacks against financial institutions.
On November 4, India's Computer Emergency Response Team (CERT-In) warned that the group is leveraging publicly available AI platforms, including ARTEX and PentAGI, to identify potential targets, conduct reconnaissance, and exploit vulnerabilities in payment application programming interfaces (APIs).
The attacks have reportedly targeted banks, fintech companies, and cryptocurrency exchanges, highlighting the increasing vulnerability of financial infrastructure as cybercriminals adopt AI-powered techniques.
AI Is Changing the Cybercrime Landscape
Traditionally, cyberattacks required considerable technical expertise and manual effort to identify vulnerabilities and exploit systems. However, AI-assisted tools can automate several stages of an attack, allowing hackers to scan potential targets, analyze exposed systems, and accelerate exploitation.
CRAFTY FALCON's reported use of publicly accessible AI tools demonstrates how advanced cyber capabilities are becoming increasingly accessible to malicious actors.
Financial Institutions Face Growing Risks
The warning comes amid a broader wave of international cybersecurity incidents involving financial institutions and digital assets. Reports of approximately €100 million stolen from a French bank and $6 billion drained from Binance wallets further underline the scale of potential financial losses associated with cyber threats.
For banks and fintech companies, vulnerable payment APIs can become entry points for unauthorized transactions, data exposure, and disruptions to financial services. Cryptocurrency exchanges also face significant risks because compromised systems and wallets can result in substantial and potentially irreversible losses.
CERT-In Calls for Immediate Security Measures
To counter the growing threat, CERT-In has urged financial institutions to strengthen their cybersecurity infrastructure. Its recommendations include:
Implementing continuous 24x7 security monitoring.
Strengthening API authentication and access controls.
Regularly identifying and patching software vulnerabilities.
Improving threat detection and incident response capabilities.
Reporting cybersecurity incidents promptly to the appropriate authorities.
The Bigger Picture: AI as Both a Security Tool and a Weapon
The CRAFTY FALCON incident highlights an important shift in the cybersecurity landscape: artificial intelligence is becoming a powerful tool for both cyber defenders and attackers.
While financial institutions increasingly use AI to detect suspicious transactions and prevent fraud, malicious groups can also exploit AI capabilities to automate reconnaissance and make attacks faster and more scalable.
The Bottom Line
India's warning is another reminder that cybersecurity must evolve alongside artificial intelligence. As banks, fintech platforms, and cryptocurrency exchanges become increasingly interconnected, securing APIs, monitoring transactions continuously, and responding rapidly to threats will be essential to protecting the global financial ecosystem.